Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.mft
File: 8H-pjVIdhMKNrsion3SIu86AAhU.mft (raw, json)
Hash identifier: 5fD0n5jWm5K7sRxFnYfURUCPxS5n9ZWQ9lAmm6ic5pM=
Subject key identifier: EB:0B:EA:1A:F9:F3:FF:74:B9:E6:C8:16:4D:F8:ED:41:98:14:95:E7
Authority key identifier: F0:7F:A9:8D:52:1D:84:C2:8D:AE:C8:A8:9F:74:88:BB:CE:80:02:15
Certificate issuer: /CN=f07fa98d521d84c28daec8a89f7488bbce800215
Certificate serial: 0199FBEBDC4B099A7BC0F3C4A2337D78B985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8H-pjVIdhMKNrsion3SIu86AAhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.mft
Manifest number: 0305
Signing time: Sun 19 Oct 2025 10:02:42 +0000
Manifest this update: Sun 19 Oct 2025 10:02:42 +0000
Manifest next update: Mon 20 Oct 2025 10:02:42 +0000
Files and hashes: 1: 8H-pjVIdhMKNrsion3SIu86AAhU.crl (hash: JLzf3v2BrAGDx50/e+pbQTURx96N+t7fCA1YV2sZ7lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8H-pjVIdhMKNrsion3SIu86AAhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:dc:4b:09:9a:7b:c0:f3:c4:a2:33:7d:78:b9:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f07fa98d521d84c28daec8a89f7488bbce800215
Validity
Not Before: Oct 19 10:02:42 2025 GMT
Not After : Oct 20 10:02:42 2025 GMT
Subject: CN=eb0bea1af9f3ff74b9e6c8164df8ed41981495e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c0:64:e1:8c:85:5a:99:67:37:ff:6b:0a:a8:
40:38:c2:1a:3a:7a:72:2f:c6:18:15:13:6a:ff:d9:
5f:a7:d3:40:64:d7:c1:ab:08:a1:b0:6f:47:60:c7:
4c:c8:92:15:e1:a5:49:81:9e:69:6a:1e:1c:ed:47:
da:9b:93:08:00:5f:b7:0c:7e:31:e0:54:23:5e:31:
82:42:4b:6c:b3:92:16:96:37:67:b4:b4:65:08:5b:
9b:1a:e6:32:2a:e1:71:a0:ca:b8:39:99:2d:91:c7:
b4:dd:f0:57:cf:6b:f2:3f:6f:e1:74:70:9f:e2:c4:
b4:16:39:23:d0:cf:63:04:02:1c:ca:1b:24:dc:10:
fc:ae:01:87:dc:b7:67:a3:82:88:15:37:99:dd:fe:
d1:5c:4b:0a:a8:1f:f2:de:18:bb:a2:87:9a:5e:f2:
59:55:1e:a0:59:c1:30:af:a9:2c:8b:65:3b:50:11:
99:78:52:89:cf:e9:3f:5e:c4:8f:40:cf:95:b0:0f:
7b:d8:69:28:d7:8f:4e:4d:81:97:c0:29:08:ba:8d:
04:81:a6:6a:2b:82:14:3e:ef:a1:34:41:a2:a4:37:
3e:a0:d3:9c:ba:ac:47:54:b7:7b:f7:7a:2c:50:cf:
35:d9:72:a1:d1:e9:3b:44:65:95:1b:95:92:0a:06:
7c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0B:EA:1A:F9:F3:FF:74:B9:E6:C8:16:4D:F8:ED:41:98:14:95:E7
X509v3 Authority Key Identifier:
keyid:F0:7F:A9:8D:52:1D:84:C2:8D:AE:C8:A8:9F:74:88:BB:CE:80:02:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8H-pjVIdhMKNrsion3SIu86AAhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d2:69:b3:2e:50:47:4b:e8:db:5d:95:07:7a:ea:bf:b0:b5:
02:23:e4:21:18:df:be:ea:35:1a:c8:85:0e:55:71:0c:88:f4:
0c:f3:70:7d:bd:76:65:1d:3d:f1:11:cb:c1:01:d0:57:39:d0:
79:7c:d7:ce:c9:cd:f8:ff:69:35:bd:37:77:fc:97:8b:06:3c:
3c:b1:0c:f3:9c:94:ae:b0:10:91:cf:80:df:42:d8:96:f3:33:
7e:a9:8f:2a:61:38:5c:55:57:cb:3c:1e:58:45:3c:11:6e:ca:
8d:59:d4:ce:6d:23:3a:97:ed:7f:a2:64:b2:da:3a:0b:54:4b:
de:c9:01:2d:ac:73:c2:14:6f:05:ae:e4:8a:ea:6f:af:cb:2c:
2f:ad:bf:58:bd:bf:4e:f8:db:af:90:cb:1a:df:4b:a7:71:33:
93:4a:e8:1e:7d:02:f6:63:6a:49:c1:78:e3:d1:a1:a5:1d:fd:
06:80:c0:2a:87:13:f2:63:6c:4f:c2:70:0e:05:2a:fa:c4:1b:
4c:f3:a1:33:42:fa:18:8d:0e:96:dc:ac:cb:8a:4f:58:37:7e:
23:e2:ee:0a:de:5b:49:e1:38:51:ef:03:f0:81:20:28:44:e4:
c5:96:d0:e8:51:86:ef:2f:32:38:18:31:9a:18:9c:92:d4:af:
84:eb:e5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:22 2025 by rpki-client